CVE-2023-3899
Summary
| CVE | CVE-2023-3899 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2023-08-23 11:15:00 UTC |
| Updated | 2023-11-09 20:11:00 UTC |
| Description | A vulnerability was found in subscription-manager that allows local privilege escalation due to inadequate authorization. The D-Bus interface com.redhat.RHSM1 exposes a significant number of methods to all users that could change the state of the registration. By using the com.redhat.RHSM1.Config.SetAll() method, a low-privileged local user could tamper with the state of the registration, by unregistering the system or by changing the current entitlements. This flaw allows an attacker to set arbitrary configuration directives for /etc/rhsm/rhsm.conf, which can be abused to cause a local privilege escalation to an unconfined root. |
Risk And Classification
Problem Types: CWE-863
NVD Known Affected Configurations (CPE 2.3)
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Red Hat | MISC | access.redhat.com | |
| [SECURITY] Fedora 37 Update: subscription-manager-1.29.37-1.fc37 - package-announce - Fedora Mailing-Lists | MISC | lists.fedoraproject.org | |
| 2225407 – (CVE-2023-3899) CVE-2023-3899 subscription-manager: inadequate authorization of com.redhat.RHSM1 D-Bus interface allows local users to modify configuration | MISC | bugzilla.redhat.com | |
| cve-details | MISC | access.redhat.com | |
| Red Hat | MISC | access.redhat.com | |
| Red Hat | MISC | access.redhat.com | |
| Red Hat | MISC | access.redhat.com | |
| Red Hat | MISC | access.redhat.com | |
| Red Hat | MISC | access.redhat.com | |
| Red Hat | MISC | access.redhat.com | |
| Red Hat | MISC | access.redhat.com | |
| [SECURITY] Fedora 38 Update: subscription-manager-1.29.37-1.fc38 - package-announce - Fedora Mailing-Lists | MISC | lists.fedoraproject.org | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 241955 Red Hat Update for subscription-manager (RHSA-2023:4702)
- 241956 Red Hat Update for subscription-manager (RHSA-2023:4704)
- 241958 Red Hat Update for subscription-manager (RHSA-2023:4703)
- 241959 Red Hat Update for subscription-manager (RHSA-2023:4705)
- 241961 Red Hat Update for subscription-manager (RHSA-2023:4701)
- 241962 Red Hat Update for subscription-manager (RHSA-2023:4708)
- 241963 Red Hat Update for subscription-manager (RHSA-2023:4706)
- 241964 Red Hat Update for subscription-manager (RHSA-2023:4707)
- 257252 Centos Security Update for subscription-manager
- 378886 Alibaba Cloud Linux Security Update for subscription-manager (ALINUX2-SA-2023:0037)
- 379090 IBM QRadar SIEM Multiple Security Vulnerabilities (7070736)
- 673810 EulerOS Security Update for subscription-manager (EulerOS-SA-2024-1302)